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AMENDMENTS TO THE CLAIMS 
Please amend the claims as indicated in the following listing of all claims: 

Claims 1-42 {Canceled) 

43. {Currently Amended) A method of securely directing private information to a 
recipient via a messaging system, the method comprising: 

transmitting a first message to the recipient, the first message including a recipient- 
specific resource locator; [[and]] 

responsive to a retrieval using the recipient-specific resource locator, authenticating 
identity of the recipient and thereafter supplying the private information to the 
recipien t: and 

prior to the transmitting of the first message, receiving from a sender of the private 
information at least one criterion for authenticating identity of the recipient, 
wherein the criterion identifies a type of authentication information for 
verification against a third-party information service, but does not specify the 
particular information with which identity of the recipient is to be authenticated, 
and wherein the authenticating includes verifying information received from the 
recipient using the third-party information service . 

44. (Previously Presented) The method of claim 43, 

wherein, prior to transmission of the first message, the recipient has not been enrolled for 
access to the private information. 

45. (Previously Presented) The method of claim 43, further comprising: 

enrolling the recipient for subsequent access to private information after identity of the 
recipient has been authenticated. 
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46. (Previously Presented) The method of claim 43, 

wherein the supplying includes transmitting a second message that verifies enrollment of 
the recipient and includes a second resource locator by which the recipient may 
retrieve the private information. 

47. (Previously Presented) The method of claim 43, 

wherein the supplying includes delivering the private information in response to a 
retrieval by the authenticated recipient. 

48. {Canceled) 

49. {Canceled) 

50. {Currently Amended) Themethodof claim [[49]] 43, 

wherein the third-party information service includes a credit card authorization server. 

51. {Currently Amended) The method of claim [[49]] 43, further comprising: 
communicating at least some of the information received from the recipient to the third- 
party information service; and 

receiving verification from the third-party information service. 

52. {Currently Amended) Themethodof claim [[48]] 43, 

wherein the criterion specifies authentication information known, or separately 

communicated to, the intended recipient but generally unknown to others; and 

wherein the authenticating includes verifying information received from the recipient 
against the authentication information received from the sender. 

53. (Previously Presented) The method of claim 43, 
wherein the first message is an e-mail message; 

wherein the private information includes a document encoding; and 
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wherein the resource locator includes an URL and the authenticating is performed using a 
dialog that is at least initiated using content supplied to the recipient based on the 
URL. 

Claims 54-61 {Canceled) 
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